$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json) Hash identifier: lEtLaHaTNDP4/zXYsQXO2uX4jr8ye0oXsZ9K79XqUJk= Subject key identifier: 99:A9:69:47:5A:43:0A:07:27:89:90:44:16:0E:A8:F4:10:E6:22:8F Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Certificate serial: 24A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft Manifest number: 24A3 Signing time: Wed 20 Nov 2024 14:47:11 +0000 Manifest this update: Wed 20 Nov 2024 14:47:10 +0000 Manifest next update: Wed 27 Nov 2024 14:47:10 +0000 Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: srK5D/+uAC766xGZlD4Kz9GSUkFcTPZj7MEN50aCcmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9379 (0x24a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Validity Not Before: Nov 20 14:47:10 2024 GMT Not After : Nov 27 14:47:10 2024 GMT Subject: CN=673df66f-c650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:71:0f:68:12:f2:17:ee:8e:46:70:0f:7a:cd: bb:8e:cf:97:38:12:9e:7e:f7:5f:66:b4:33:4e:39: fd:f8:b7:d4:c6:c3:21:37:3d:29:01:1f:18:94:ee: 62:be:dc:b3:51:89:a7:3b:b5:4f:8a:54:5d:e8:23: ad:06:37:33:f1:e1:5a:46:8a:46:3d:47:55:8d:1e: d8:b0:a5:80:07:e6:66:1f:6a:e8:f6:24:4f:21:8c: aa:bc:8e:0c:98:1f:a7:5b:ad:b2:80:cd:55:1a:ce: b1:9b:17:cf:5b:9d:db:4d:cf:90:90:fe:87:cc:44: 1a:83:ba:2e:8e:da:d4:2b:14:5d:22:ff:bf:45:a4: a9:7f:27:82:0d:42:a1:25:68:3f:ff:54:66:bd:54: 3d:7a:0e:de:b8:50:ef:7b:8c:05:ee:99:d3:54:a7: 1e:4e:17:72:25:4e:a8:fd:79:13:54:9e:43:6a:5d: fb:00:bb:2f:fa:5f:53:91:5e:b1:be:93:d6:9b:82: 80:3e:bf:87:07:25:d6:71:16:d0:6e:cf:ca:2b:60: 40:a3:da:6d:b8:8c:ab:39:ad:ec:51:c9:37:77:72: 48:5e:27:35:5a:09:06:43:8d:f9:74:05:9b:1b:26: 0e:6b:e1:81:11:68:f9:bb:09:9b:ff:04:34:03:d7: 31:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A9:69:47:5A:43:0A:07:27:89:90:44:16:0E:A8:F4:10:E6:22:8F X509v3 Authority Key Identifier: keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:bb:e5:d8:69:57:f8:98:be:66:1c:61:6f:05:d6:93:71:43: 42:41:aa:36:41:2e:8b:ce:f4:85:8f:67:81:94:c5:04:99:85: 0e:ee:b4:be:9a:1e:34:41:22:f1:e4:87:bc:21:f4:fe:d6:5f: 55:66:58:19:82:ea:15:cc:63:c1:b9:a3:27:79:f8:6d:49:23: b7:0d:5c:ef:3c:8b:b1:84:72:04:83:b7:66:a7:51:91:21:20: c2:19:d1:e2:2e:25:c4:59:23:b6:b8:44:1a:73:e4:a3:74:21: 49:1e:35:4b:88:ee:82:da:a8:7a:fa:09:f3:57:49:74:95:5d: aa:e7:43:5c:b0:3c:46:83:48:b5:0c:ef:29:d0:46:29:00:d4: cc:98:2d:ea:01:a0:be:48:e2:7a:94:98:c7:f7:eb:a4:87:98: 2f:f8:07:24:6d:ed:67:4e:5a:c7:68:f7:b4:ed:38:cd:aa:2b: 7a:36:4f:28:a1:29:2c:a6:f8:d2:64:e0:75:8b:c2:8e:31:eb: 9b:4d:cd:9c:4d:5d:59:b2:0b:be:5d:a8:f4:be:bb:fd:18:34: 0e:24:9c:03:01:50:af:dd:41:29:cf:30:e1:a3:b0:fa:a4:9b: c2:e4:42:14:17:5a:88:8f:51:8e:61:2a:3f:0e:59:12:21:42: 25:ff:5d:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy NjA2OTNBNTcwHhcNMjQxMTIwMTQ0NzEwWhcNMjQxMTI3MTQ0NzEwWjAYMRYwFAYD VQQDEw02NzNkZjY2Zi1jNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnEPaBLyF+6ORnAPes27js+XOBKefvdfZrQzTjn9+LfUxsMhNz0pAR8YlO5i vtyzUYmnO7VPilRd6COtBjcz8eFaRopGPUdVjR7YsKWAB+ZmH2ro9iRPIYyqvI4M mB+nW62ygM1VGs6xmxfPW53bTc+QkP6HzEQag7oujtrUKxRdIv+/RaSpfyeCDUKh JWg//1RmvVQ9eg7euFDve4wF7pnTVKceThdyJU6o/XkTVJ5Dal37ALsv+l9TkV6x vpPWm4KAPr+HByXWcRbQbs/KK2BAo9ptuIyrOa3sUck3d3JIXic1WgkGQ435dAWb GyYOa+GBEWj5uwmb/wQ0A9cxfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmpaUda QwoHJ4mQRBYOqPQQ5iKPMB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5 MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE a2E2MGJFTjFRUUFtQnBPbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmu+XYaVf4mL5mHGFvBdaTcUNCQao2QS6LzvSFj2eBlMUEmYUO7rS+ mh40QSLx5Ie8IfT+1l9VZlgZguoVzGPBuaMnefhtSSO3DVzvPIuxhHIEg7dmp1GR ISDCGdHiLiXEWSO2uEQac+SjdCFJHjVLiO6C2qh6+gnzV0l0lV2q50NcsDxGg0i1 DO8p0EYpANTMmC3qAaC+SOJ6lJjH9+ukh5gv+Ackbe1nTlrHaPe07TjNqit6Nk8o oSkspvjSZOB1i8KOMeubTc2cTV1Zsgu+Xaj0vrv9GDQOJJwDAVCv3UEpzzDho7D6 pJvC5EIUF1qIj1GOYSo/DlkSIUIl/11D -----END CERTIFICATE-----Generated at Wed Nov 20 16:12:03 2024 by rpki-client on console-fra.rpki-client.org